SMB: Trans2Root Buffer Overflow (1)

This signature detects attempts to exploit a known vulnerability against Samba, an open source software suite for file and print services to SMB/CIFS clients. Samba versions 2.2.8a and earlier are vulnerable. A successful exploitation can allow an attacker to execute arbitrary commands and gain root access.

Extended Description

A buffer overflow vulnerability has been reported for Samba. The problem occurs when copying user-supplied data into a static buffer. By passing excessive data to an affected Samba server, it may be possible for an anonymous user to corrupt sensitive locations in memory. Successful exploitation of this issue could allow an attacker to execute arbitrary commands, with the privileges of the Samba process. It should be noted that this vulnerability affects Samba 2.2.8 and earlier. Samba-TNG 0.3.1 and earlier are also affected.

Affected Products

Sun cobalt_raq_550_4100r,Samba samba

References

BugTraq: 7294

CVE: CVE-2003-0201

URL: http://www.kb.cert.org/vuls/id/267873 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:567

Short Name

SMB:TRANS2ROOT-OF

Severity

Critical

Recommended

False

Recommended Action

Drop

SMB: Trans2Root Buffer Overflow (1)

Extended Description

Affected Products

References

Found a potential security threat?